Re: "revoking" privileges granted to public

<premmehrotra_at_hotmail.com> wrote in message news:1103495539.747238.132220_at_z14g2000cwz.googlegroups.com...
>I am using Oracle 8.1.6.2 on HP UNIX 11i.
> I have a third party application which has a schema "marc" which has
> many tables, views, stored procedures etc. Vendor has granted select,
> insert, delete, execute, update, insert on these objects to public.
>
> I want to create a read only database user for marc schema, i.e.,
> marcread, Is there anyway to revoke insert, delete, update privileges
> from marcread which were indirectly granted via public. I have
> not yet found a way.
>
> I did try granting only connect role to marcread (i.e., no resource),
> yet it
> could insert/delete/update rows in marc.
>
> I know in SQL SERVER 2000, there is something called "deny" which can
> deny privileges granted to public from a specific user, but
> I have not been able to find equivalent in Oracle.
> Appreciate any ideas.
>
>
> Prem
>

no you cant, because by definition they are available to public

before insert trigger might work - unsure though Received on Sun Dec 19 2004 - 17:30:32 CST